General

  • Target

    NEAS.4eaf823c2db3842b7dbbeff393a09eff2b08e430433e0b6ff20b309e808f839f_JC.exe

  • Size

    9.1MB

  • MD5

    748c8afecf419fdae67721de92c99c93

  • SHA1

    4f1bd8ad9989761b3a33d0d91c0fb52079ec5e38

  • SHA256

    4eaf823c2db3842b7dbbeff393a09eff2b08e430433e0b6ff20b309e808f839f

  • SHA512

    b8642a681f3b662f972601e914fbfe2615a089fdaff83eaff7bc698e967294a27a0e5213b49b55bd4d0f35cf2b8a92c3f035f64ca3459adfa67ac6c05763c1d6

  • SSDEEP

    196608:iUkyznhEmkPYluKwSRyflNYr1rzi7ogzC8VqZ+MS8uYuA3SzHdvMMs5l6yOnC8FG:HjjTuKwSRmg11gJAEMmYdS79MX6yOC2G

Score
10/10

Malware Config

Signatures

  • Blackmoon family
  • Detect Blackmoon payload 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.4eaf823c2db3842b7dbbeff393a09eff2b08e430433e0b6ff20b309e808f839f_JC.exe
    .exe windows:4 windows x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86


    Headers

    Sections